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DETAILED ACTION 



1. Claims 1-20 and 22 are pending. 

2. This Office Action in response to amendment filed 11/9/2007. 

3. A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 
1.17(e), was filed in this application after final rejection. Since this application is eligible for continued 
examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the finality of 
the previous Office action has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
11/9/2007 has been entered. 

4. Below, Examiner has pointed out particular references contained in the prior art(s) of record in the 
body of this action for the convenience of the applicant. Although the specified citations are representative 
of the teachings in the art and are applied to the specific limitations within the individual claims, other 
passages and figures may apply as well. Applicant should consider the entire prior art as applicable as to 
the limitations of the claims. It is respectfully requested from the applicant, in preparing the response, to 
consider fiiUy each reference in its entirety as potentially teaching all or part of the claimed invention, as 
well as the context of the passage as taught by the prior arts or disclosed by the examiner. 

Claim Rejections - 35 USC § 101 

1. The rejection under U.S.C. 101 has been overcome by the amendment filed 6/18/2007. However, 
the addition of "computer program product" and "computer-usable medium" raises a U.S.C. 112 new 
matter issue. 
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Claim Rejections - 35 USC § 112 
1. The rejection of Claims 20 and 22 under 35 USC 112 is withdrawn. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections set 

forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 of this 
title, tf the differences between the subject matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention was made. 

1. Claims 1-20 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over Pang et al. 
(US 6,981,153), hereafter "Pang" in view of Lease et al. (US 6,496,971), hereafter "Lease". 

Considering Claim 1, Pang discloses a system of securely using decryption keys during 
Programmable Logic Device (PLD) configuration (abstract, column 2- hues 35-45), comprises: a key 
storage register coupled to the microcontroller for storing key data (Fig. loA, column 15, hues 14-23, Lease- 
column 4- lines 17-24); a decryptor coupled to the key storage register (Fig. 3- item 24), wherein only the 
decryptor can read from the key storage register (column 13- lines 37-56, column 16- lines 27-33, Fig. 8, 
Fig. 9); and a configuration data register in the PLD (Fig. 3, column 11- lines 44-56), wherein the 
configuration data register cannot be read by the microcontroller after the decryptor is used (column 14- 
hnes 18-38). 

Pang does not explicitly disclose a microcontroller within the PLD for receiving an encrypted bitstream. 
Lease discloses a microcontroller within the PLD for receiving an encrypted bitstream (column 4- lines 12- 
25). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the teachings of Pang by a microcontroller within the PLD for receiving an encrypted 
bitstream as taught by Lease in order to support multiple configuration modes (Lease- column 2- hues 57- 
58). 

Considering Claim 2, the combination discloses the microcontroller stores key data in the key 
storage register, but the microcontroller cannot read from the key storage register (Pang- column 15- lines 
39-40 and 58-66, column 16- lines 27-33). 

Considering Claim 3, the combination discloses the decryptor is a hardware decryptor embedded in 
an integrated circuit along with the PLD (Pang- column 13- lines 37-56, Fig. 3- item 24). 

Considering Claim 4, the combination discloses the decryptor is a software decryptor stored in a 
memory and executed by the microcontroller (Pang- column 13- hues 37-56), wherein the system further 
comprises hardware that selectively enables access to the key storage register by allowing the 
microcontroller access when a program counter of the microcontroller specifies an address within an 
address range corresponding to the software decryptor within the memory (Lease- column 40-53, Pang- 
column 20- lines 27-53, Fig- 16). 

Considering Claims 5, 10, the combination discloses the memory is a ROM having a decryption 
engine (Lease- column 3- lines 7-12, column 4- lines 17-25). 

Considering Claim 6, the combination discloses the microcontroller further receives a 
configuration boot program comprising the decryptor in programmatic form along with the encrypted 
bitstream comprising encrypted configuration data to be loaded into the configuration data register (Lease- 
column 8- Unes 33-55, Pang- column 1- Unes 31-38 and 52-58). 
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Considering Claim 7, the combination discloses the microcontroller, the key register, the decryptor, 
and the configuration data register are all within the PLD (Pang- Fig. 3). 

Considering Claim 8, the combination discloses the microcontroller is an emulated microcontroller 
in the PLD (Pang- column 5- lines 47-64). 

Considering Claim 9, the combination discloses a system of securely using decryption keys during 
configuration of an integrated circuit having programmable logic (Pamg- abstract, column 2- lines 35-45), 
comprising: a microcontroller within the integrated circuit for receiving an encrypted bitstream (Lease- 
column 4- lines 15-25, Pang- column 5- hues 47-64); a key storage register coupled to the microcontroller 
for storing key data (Pang- Fig. loA, column 15, hues 14-23); a decryption program stored in a memory that 
uses a predetermined memory address to enable access to the key storage register (Pang- column 12- lines 
36-47); and a configuration data register in the integrated circuit (Pang- Fig. 3, column 11- lines 44-56), 
wherein the configuration data register cannot be read by the microcontroller after the decrj^tion program 
is used (Pang- column 11- lines 44-56, column 14- lines 18-38); wherein access to the key storage register 
by the microcontroller is allowed only when a program counter of the microcontroller specifies an address 
within an address range corresponding to the decryption program in the memory (Lease- column 40-53, 
Pang- column 20- hues 27-53, Fig- 16). 

Considering Claim 11, the combination discloses the microcontroller further receives a 
configuration boot program along with the encrypted bitstream (Lease- column 8- lines 32-55). 

Considering Claim 12, the combination discloses a method of securely using decryption keys during 
field programmable gate array configuration (Pang- abstract- column 2- lines 35-45), comprising the steps 
of: receiving an encrypted bitstream at a microcontroller within the field programmable gate array (Lease- 
column 4- lines 15-25, Pang- column 5- lines 47-64); loading a decryptor with data from a key register 
(Pang- column 13- lines 37-55); loading the decryptor with data fi-om the microcontroller (Pang- column 
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13- lines 37-56); and loading a configuration data register with a decrypted bitstream from the decryptor 
(Pang- column 14- lines 18-38), wherein the configuration data register cannot be read by the 
microcontroller after the decryptor is used (Pang- column 14- lines 18-38). 

Considering Claim 13, the combination discloses the step of loading the key register with key data 
from the microcontroller (Pang- column 15- hnes 39-40 and 58-66). 

Considering Claim 14, the combination discloses the configuration data register cannot be read by 
the microcontroller while the decryptor is used (Pang- column 14- lines 18-33). 

Considering Claim 15, the combination discloses the microcontroller cannot read from the key 
register (Pang- column 15- lines 39-40 and 58-66, column 16- lines 27-33). 

Considering Claim 16, the combination discloses only the decryptor can read from the key storage 
register (Pang- column 13- lines 37-55, column 15- lines 59-66, column 16- lines 27-33). 

Considering Claim 17, the combination discloses the steps of loading the decryptor with data from 
the key register and loading the decryptor with data from the microcontroller (Pang- column 13- lines 37- 
55) comprises selectively enabUng access to the key register by allowing the microcontroller access only 
when a program counter of the microcontroller specifies an address within an address range of the 
decryptor (Lease- column 6- lines 40-53). 

Considering Claim 18, the combination discloses a system of securely using decryption keys during 
programmable logic device configuration (Pang- abstract, column 2- lines 35-45), comprises: a memory- 
mapped key register coupled to a microcontroller data bus (Pang- column 15- lines 14-23); a decryptor 
engine stored in non-volatile memory and coupled to the microcontroller data bus (Pang- column 13- lines 
37-55); and logic circuitry limiting access to the key register from the microcontroller data bus using 
specified addresses of the non-volatile memory corresponding to the decryptor engine and a received 
program counter value of a microcontroller (Pang- column 20- lines 27-53, Lease- column 6- lines 40-53). 
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Consdering Claim 20, the combination discloses a computer-readable usable medium comprising 
instructions written thereon in the form of a bitstream that configures a programmable logic device (Pang- 
abstract, column 2- lines 35-45), the computer- readable usable medium comprising: a configuration boot 
program portion of the bitstream that runs a microcontroller on the programmable logic device (Lease- 
column 8- lines 32-55); and an encrypted bitstream portion of the bitstream containing encrypted 
configuration data that when decrypted and loaded into a configuration data register on the programmable 
logic device configures the programmable logic device (Lesea- column 8- lines 33-55, Pang- column 2- lines 
35-45), wherein the configuration boot program further comprises instructions for a decryptor (Pang- 
column 13- lines 37-56), wherein the configuration boot program stores the instructions for the decryptor 
Pang- column 2- lines 35-45). 

Considering Claim 22, the discloses the configuration boot program comprises instructions for a 
decompressor (Lease- column 2- lines 12-25, column 8- lines 15-20). 

2. Claims 1-20 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over Pang and 
Lease in view of Kuranaga (US 5,409,661), hereafter "Kuranaga". 

Considering Claim 19, the combination does not exphcitly disclose the logic circuitry uses specified 
addresses of the non-volatile memory by limiting access to minimum and maximum ROM memory 
addresses using the microcontroller program counter. The combination does suggest limiting access to 
ROM memory addresses using a program counter (Lease- column 6- hues 40-53, Pang- column 16- lines 
27-53). 
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Kuranaga discloses the logic circuitry uses specified addresses of the non-volatile memory by limiting 
access to minimum and maximum ROM memory addresses using the microcontroller program counter 
(column 6- lines 56-67). 

Therefore, it would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the combination by the logic circuitry uses specified addresses of the non-volatile memory 
by limiting access to minimum and maximum ROM memory addresses using the microcontroller program 
counter as taught by Kuranaga in order to facilitate the protection of designs loaded into a PLD through a 
bitstream (Pang- column 1- lines 6-7). 

Response to Arguments 



1. Apphcant's arguments with respect to the claims have been considered but are moot in view of the 
new ground(s) of rejection. 

Conclusion 



1. Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to Randal D. Moran whose telephone number is 571-270-1255. The examiner can normally be 
reached on M-F: 7:00 - 4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Kim Vu 
can be reached on 571-272-3859. The fax phone number for the organization where this appUcation or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Apphcation 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/R. D. M./ 

Examiner, Art Unit 2135 

3/12/2008 
/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



